GDPR Compliance IT Risk Assessment Form
Project/Process Information
Project/Process Name
Process Owner
Description
Data Processing Details
Type of Personal Data Processed
Data Subjects (e.g. customers, employees)
Purpose of Data Processing
Data Storage Location(s)
Third-party Data Sharing
GDPR Risks Assessment
Potential GDPR Risks
Implemented Security Measures
Risk Level
Low
Moderate
High
Additional Controls Needed
Review and Confirmation
Assessor Name
Date
Comments